Olá, percebi que depois que meu computador foi infectado pelo malware 123rede.com ficou com a internet comprometida. Consegui retirar do PC, mas a lentidão permaneceu. A abertura dos programas e inicialização do computador não está lenta, mas percebi que quando abro uma pagina na internet ela demora mais do que o normal. Já fiz o teste nos dois navegadores (IE e Google Chrome). Já passei o antivirus Avast, o CCleaner, o Windows Defender e o Malwarebytes Anti- Malware e nada foi encontrado o PC está aparentemente normal. Também encontrei em contato o pessoal de minha internet e também está tudo normal. O que pode ser que está acontecendo? não sei mais o que fazer. Alguem me ajude!!

Internet lenta - Vírus 123.rede.com

Anônima

Desative temporariamente seu antivírus para evitar conflitos.

* Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:

http://www.hijackthis.nl/smeenk/

Para executá-lo corretamente siga as dicas deste tutorial:

**Exclua adwares e outras ameaças de seu PC e browsers com o aplicativo Zoek**

* Assim que ele concluir a limpeza dos problemas acesse o log (relatório) do Zoek que estará em C:*zoek-results.txt* e copie todo seu conteúdo e poste em sua próxima resposta.

0 comentários

Anônima

Olá Rafael Turbo,

Bom efetuado todos estes passos com o ZHPCLEANER, sinto informar que continua abrindo o seguinte endereço de internet pelo IE: http://www.jogostempo.com/?oem=brsoftv3&uid=WD-WXD1E63WKUF6\_WDCWD5000LPVX-00V0TT0&tm=1422415035

segue o txt solicitado:

~ ZHPCleaner v2015.2.25.92 by Nicolas Coolman (25/02/2015)

~ Run by Edson (Administrator) (25/02/2015 20:01:25)

~ Forum : http://forum.nicolascoolman.fr

~ Facebook : https://www.facebook.com/nicolascoolman1

~ State version : Version OK

~ Type : Repair

~ Report : C:\Users\Edson\Desktop\ZHPCleaner.txt

~ Quarantine : C:\Users\Edson\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt

~ UAC : Deactivate

~ Boot Mode : Normal (Normal boot)

~ Windows 7, 32-bit Service Pack 1 (Build 7601)

---\ Services (3)

---\ Browser internet (3)

REPLACED Proxy: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyHttp1.1 ( 1 )

REPLACED Proxy: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride ( <-loopback> )

REPLACED Proxy: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyHttp1.1 ( 1 )

---\ Hosts file (0)

~ No malicious items found.

---\ Scheduled automatic tasks. (4)

DELETED task: [globalUpdateUpdateTaskMachineCore] [C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job] (PUP.GlobalUpdate)

DELETED task: [globalUpdateUpdateTaskMachineUA] [C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job] (PUP.GlobalUpdate)

DELETED task: [PriceMeterLiveUpdateUpdateTaskMachineCore] [C:\Windows\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore.job] (PUP.PriceMeter)

DELETED task: [PriceMeterLiveUpdateUpdateTaskMachineUA] [C:\Windows\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA.job] (PUP.PriceMeter)

---\ Explorer ( File, Folder) (23)

MOVED file: C:\Program Files\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe [ - ] (PUP.PriceMeter)

MOVED file: C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [ - ] (PUP.Fuyu)

MOVED file: C:\Users\Edson\AppData\Roaming\unins000.exe [ - Setup/Uninstall] (Adware.Pirrit)

MOVED file: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job [ - ] (PUP.GlobalUpdate)

MOVED file: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job [ - ] (PUP.GlobalUpdate)

MOVED file: C:\Windows\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore.job [ - ] (PUP.PriceMeter)

MOVED file: C:\Windows\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA.job [ - ] (PUP.PriceMeter)

MOVED file: C:\Windows\System32\Tasks\060184C3-9766-46a0-B258-F4518A0B2633 [ - ] (PUP.CrossRider)

MOVED file: C:\Program Files\Uninstall Nexus\unins000.exe [ - Setup/Uninstall] (PUP.UniSales)

MOVED folder*: C:\Program Files\PriceMeterLiveUpdate\Update (PUP.PriceMeter)

MOVED folder*: C:\Program Files\PriceMeterLiveUpdate (PUP.PriceMeter)

MOVED folder*: C:\Program Files\Uninstall Nexus (PUP.UniSales)

MOVED folder*: C:\ProgramData\Baidu\Antivirus (Adware.BDPlugin)

MOVED folder*: C:\ProgramData\WPM\update (PUP.WpManager)

MOVED folder*: C:\ProgramData\Baidu (Adware.BDPlugin)

MOVED folder*: C:\ProgramData\boost_interprocess (PUP.Boost)

MOVED folder*: C:\ProgramData\WindowsMangerProtect (PUP.Fuyu)

MOVED folder*: C:\ProgramData\WPM (PUP.WpManager)

MOVED file: C:\Users\Edson\AppData\Roaming\IminentToolbar\sqlite3.dll [ - ] (Adware.IMBooster)

MOVED folder*: C:\Users\Edson\AppData\Roaming\IminentToolbar (Adware.IMBooster)

MOVED file: C:\Users\Edson\AppData\Local\genienext\nengine.dll [ - ] (PUP.NextLive)

MOVED folder*: C:\Users\Edson\AppData\Local\genienext (PUP.NextLive)

MOVED file: C:\Windows\Prefetch\PRICEMETERLIVEUPDATE.EXE-376284BF.pf [ - ] (PUP.PriceMeter)

---\ Registry ( Key, Value, Data) (81)

DELETED key^: HKLM\SYSTEM\CurrentControlSet\Services\globalUpdate [C:\Program Files\globalUpdate\Update\GoogleUpdate.exe (Not File) ] (PUP.GlobalUpdate)

DELETED key^: HKLM\SYSTEM\CurrentControlSet\Services\pricemeterliveUpdate [C:\Program Files\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe] (PUP.PriceMeter)

DELETED key^: HKLM\SYSTEM\CurrentControlSet\Services\WindowsMangerProtect [C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe] (PUP.Fuyu)

REPLACED data: HKLM...\IEXPLORE.EXE\Shell\open\Command\C:\Program Files\Internet Explorer\iexplore.exe http://www.awesomehp.com/?type=sc&ts=1394170537&from=uni&uid=WDCXWD5000LPVX-00V0TT0\_WD-WXD1E63WKUF6WKUF6 (PUP.AwesomeHP)

DELETED key*: HKCU\Software\InstallCore\1I1T1Q1S [] (Heuristic.InstallCore)

DELETED key*: HKCU\Software\InstallCore\Uninstall [] (Heuristic.InstallCore)

DELETED key^: HKLM\SYSTEM\CurrentControlSet\Services\globalUpdatem [C:\Program Files\globalUpdate\Update\GoogleUpdate.exe /medsvc] (PUP.GlobalUpdate)

DELETED key^: HKLM\SYSTEM\CurrentControlSet\Services\pricemeterliveUpdatem [C:\Program Files\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe /medsvc] (PUP.PriceMeter)

DELETED value: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Iminent [C:\Program Files\Iminent\Iminent.exe /warmup "F77F87E5-A6BD-4922-A530-EDF63D7E9F8C"] (Adware.Bandoo)

DELETED value: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\IminentMessenger [C:\Program Files\Iminent\Iminent.Messengers.exe] (Adware.IMBooster)

DELETED value: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\ZHPCleaner_Key1 [REG delete "HKLM\SYSTEM\CurrentControlSet\Services\globalUpdate" /F] (PUP.GlobalUpdate)

DELETED value: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\ZHPCleaner_Key3 [REG delete "HKLM\SYSTEM\CurrentControlSet\Services\WindowsMangerProtect" /F] (PUP.Fuyu)

DELETED value: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\ZHPCleaner_Key4 [REG delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\globalUpdatem" /F] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\[email protected]/globalUpdate Update;version=10 [] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\[email protected]/globalUpdate Update;version=4 [] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\CLSID{5645E0E7-FC12-43BF-A6E4-F9751942B298}\InprocServer32 [C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll] (PUP.GlobalUpdate)

DELETED key^: HKLM\SOFTWARE\Classes\CLSID{5E89ACE9-E16B-499A-87B4-0DBF742404C1}\InprocServer32 [] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\CLSID{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}\InprocServer32 [C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\CLSID{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}\InprocServer32 [C:\Program Files\globalUpdate\Update\1.3.25.0\psmachine.dll] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\CLSID{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}\InprocServer32 [C:\Program Files\globalUpdate\Update\1.3.25.0\psmachine.dll] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\CLSID{5645E0E7-FC12-43BF-A6E4-F9751942B298} [globalUpdate Update Plugin] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\CLSID{5E89ACE9-E16B-499A-87B4-0DBF742404C1} [globalUpdate.OneClickProcessLauncher] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\CLSID{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A} [globalUpdate Update Plugin] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\CLSID{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC} [PSFactoryBuffer] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\CLSID{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A} [] (PUP.GlobalUpdate)

DELETED key*: HKCU\Software\globalUpdate [] (PUP.GlobalUpdate)

DELETED key*: HKCU\Software\InstallCore [] (Adware.InstallCore)

DELETED key*: HKCU\Software\InstalledBrowserExtensions [] (PUP.BrowserExtensions)

DELETED key*: HKCU\Software\lollipop [] (Adware.Lollipop)

DELETED key*: HKCU\Software\Softonic [] (PUP.Softonic)

DELETED key*: HKCU\Software\TutoTag [] (PUP.AgenceExclusive)

DELETED key*: HKCU\Software\AppDataLow\Software\Crossrider [] (PUP.CrossRider)

DELETED key*: HKCU\Software\AppDataLow\Software\DynConIE [] (PUP.DynConIE)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10 [globalUpdate Update Plugin] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine [globalUpdate.OneClickProcessLauncher] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0 [globalUpdate.OneClickProcessLauncher] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4 [globalUpdate Update Plugin] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync [CoCreateAsync] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0 [CoCreateAsync] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass [Google Update Core Class] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1 [Google Update Core Class] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass [Google Update Core Class] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1 [Google Update Core Class] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine [GoogleUpdate CredentialDialog] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0 [GoogleUpdate CredentialDialog] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine [Google Update Broker Class Factory] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0 [Google Update Broker Class Factory] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback [Google Update Legacy On Demand] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0 [Google Update Legacy On Demand] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc [Google Update Legacy On Demand] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0 [Google Update Legacy On Demand] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher [Google Update Process Launcher Class] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0 [Google Update Process Launcher Class] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService [Update3COMClass] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0 [Update3COMClass] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine [Google Update Broker Class Factory] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0 [Google Update Broker Class Factory] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback [GoogleUpdate Update3Web] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0 [GoogleUpdate Update3Web] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc [GoogleUpdate Update3Web] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0 [GoogleUpdate Update3Web] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Classes\Iminent [] (Adware.IMBooster)

DELETED key*: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect [] (PUP.Fuyu)

DELETED key*: HKLM\SOFTWARE\Clara [] (Adware.SupTab)

DELETED key*: HKLM\SOFTWARE\delta-homesSoftware [] (Toolbar.DeltaSearch)

DELETED key*: HKLM\SOFTWARE\GlobalUpdate [] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Iminent [] (Adware.IMBooster)

DELETED key*: HKLM\SOFTWARE\InstalledBrowserExtensions [] (PUP.BrowserExtensions)

DELETED key*: HKLM\SOFTWARE\supWindowsMangerProtect [] (PUP.Fuyu)

DELETED key*: HKLM\SOFTWARE\supWPM [] (PUP.WpManager)

DELETED key*: HKLM\SOFTWARE\Tutorials [] (PUP.AgenceExclusive)

DELETED key*: HKLM\SOFTWARE\V9 [] (PUP.V9Software)

DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ContentExplorerInstaller_RASAPI32 [] (PUP.ContentExplorer)

DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ContentExplorerInstaller_RASMANCS [] (PUP.ContentExplorer)

DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ContentExplorer_RASAPI32 [] (PUP.ContentExplorer)

DELETED key*: HKLM\SOFTWARE\Microsoft\Tracing\ContentExplorer_RASMANCS [] (PUP.ContentExplorer)

DELETED key*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WPM [Cherished Technololgy LIMITED] (PUP.CherishedTechnololgy)

DELETED key*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{5645E0E7-FC12-43BF-A6E4-F9751942B298} [C:\Program Files\globalUpdate\Update] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{68B81CCD-A80C-4060-8947-5AE69ED01199} [C:\Program Files\Iminent] (Adware.IMBooster)

DELETED key*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A} [C:\Program Files\globalUpdate\Update\1.3.25.0] (PUP.GlobalUpdate)

DELETED key*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{E6B969FB-6D33-48d2-9061-8BBD4899EB08} [C:\Program Files\Iminent] (Adware.IMBooster)

---\ Result of repair

~ Repair carried out successfully

~ Browser not found (Google Chrome)

~ Browser not found (Opera Software)

~ Repair canceled by the user (Mozilla Firefox)

~ The system has been restarted.

---\ Statistics

~ Items scanned : 61018

~ Items found : 0

~ Items repaired : 43

End of clean at 20:10:55

===================

ZHPCleaner-[R]-25022015-20_10_55.txt

0 comentários

Anônima

Olá Edson.

Faça o download do < ZHPCleaner > < > ( ... de Nicolas Coolman )

Obs: Ao acessar o link acima clique no botão Télécharger referente ao ZHPCleaner para baixá-lo, tal como mostra a imagem abaixo:

Para executá-lo corretamente siga as dicas desta postagem:

**Tutorial completo do ZHPCleaner**

Após a utilização dele, copie todo o conteúdo do seu relatório ZHPCleaner.txt e poste em sua próxima resposta.

0 comentários

Anônima

Olá João,

Já tentou o procedimento que informei anteriormente?

Baixe e execute o AdwCleaner e Junkware Removal Tool, individualmente.

Depois, acesse o Painel de Controle, clique em Opções da Internet, clique na guia Avançadas e depois sobre o botão Redefinir.

Comente o resultado.

Então, fiz tudo que você mandou. Baixei o que tinha que baixar e escaneei o PC por completo foram deletados todos os malwares e endereços maliciosos (MALDOSOS) . Inclusive, eu já tenho em meu PC este aqui que você me indicou (Malware Bytes) mas o problema está persistindo e eu não quero recorrer a formatação. eles dominaram a minha maquina e não tenho o comando do IE e do GOOGLE CHROME, não consigo ser o administrador e não consigo alterar nas opções de internet quem comanda é trustedinstaler e não eu.

Pergunta se eu deletar o IE e o CHROME e ficar só com o firefox (este funciona sem este lixo maldito) a maquina vai estar em risco ainda....? e nunca mais utilizar os navegadores vulneráveis como estes dois, vai resolver?

0 comentários

Internet lenta - Vírus 123.rede.com

106 respostas adicionais